Risk assessment is vital to security